Resubmissions

11-01-2025 16:56

250111-vf1pmstpey 10

11-01-2025 16:49

250111-vbzxjstngs 10

General

  • Target

    build.exe

  • Size

    300KB

  • MD5

    c681779d066264777f4dfc8002e2d851

  • SHA1

    9f5d446d8ff6042992b01f143e98781446bda8c8

  • SHA256

    0966b8fa44d66718e1e97ea0deb405d742b88e8cc35bec9408e5206c82940866

  • SHA512

    a7ec8c52738dcba598749430b0c373095f2cb56766afc1f238d86ea89973ff1f4f3fc64f85fc7351353e08ea4bf75e435f5e5fcc724df346e54294269fcf6763

  • SSDEEP

    3072:ecZqf7D341p/0+mAKky4iSQIgl+B1fA0PuTVAtkxzs3RweqiOL2bBOA:ecZqf7DIvnSR8B1fA0GTV8kGQL

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

SV0ST

C2

mbaper-28496.portmap.host:2420

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • build.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections